Lucene search

K
cve[email protected]CVE-2023-39309
HistoryMar 28, 2024 - 7:15 a.m.

CVE-2023-39309

2024-03-2807:15:49
CWE-89
web.nvd.nist.gov
29
cve-2023-39309
sql injection
themefusion fusion builder
vulnerability

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.

Affected configurations

Vulners
Node
themefusionfusion_builderRange3.11.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fusion Builder",
    "vendor": "ThemeFusion",
    "versions": [
      {
        "changes": [
          {
            "at": "3.11.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.11.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

8.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2023-39309